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Abstract — The information rate for an access structure is tlie 
reciprocal of the load of the optimal secret sharing scheme for this 
structure. We determine this value for all trees: it is (2 — 1/c)^, 
where c is the size of the largest core of the tree. A subset of the 
vertices of a tree is a core if it induces a connected subgraph and 
for each vertex in the subset one finds a neighbor outside the 
subset. Our result follows from a lower and an upper bound on 
the information rate that applies for any graph and happen to 
coincide for trees because of a correspondence between the size 
of the largest core and a quantity related to a fractional cover 
of the tree with stars. 
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I. Introduction 

Secret sharing schemes has been investigated in several 
papers, for an extended bibliography see [14|. Such a scheme 
with n participants is a joint distribution of rt + 1 discreet 
random variables, one called the secret, the rest being the 
shares of the participants. An access structure designates 
certain subsets of the participants as qualified leaving the rest 
of the subsets unqualified. A secret sharing scheme for an 
access access structure has to satisfy that one can recover 
the secret with probability 1 from the shares of any qualified 
subset of the participants but the secret should be statistically 
independent from the collection of shares belonging to an 
unqualified subset. 

In this paper we deal with access structures based on graphs. 
The scheme is based on the graph G if the participants are 
the vertices, and unqualified subsets are the independent sets. 
This makes the endpoints of the edges the minimal qualified 
subsets. We simply call a secret sharing scheme for the access 
structure based on a graph G a secret sharing scheme on G. 

The load of a scheme is measured by the amount of infor- 
mation the most heavily loaded participant must remember for 
each bit in the secret. Formally, this is maxi{H{Si)) / H{(_), 
where Si is the share of participant i, ^ is the secret and 
H denotes entropy. We assume H{^) > 0. For a graph G 
the information complexity of G, denoted as cr(G'), is the 
infimum of the loads of all secret sharing schemes on G. 
The information rate, usually denoted as p{G), is simply 
p{G) = l/a{G), the inverse of this value. The notation cr{G) 
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for the complexity of the scheme was introduced in lITOl . The 
information rate of graphs has been investigated in several 
papers, see [9| for the rate of graphs with at most six vertices 
and also (among other works) l|2l, ||3l, ||4), ||5l, ll6l, llTl, lfT3l. 

In lfT3 l Stinson describes a general secret sharing construc- 
tion, which, when applied to graphs, gives the upper bound 
{d+l)/2 for the complexity of graphs with maximum degree 
d. Blundo et al. in |2| constructed an infinite family of graphs 
for each d for which Stinson's bound is tight. The d — 2 case 
is fully settled in jSj: the information complexity of paths 
and cycles is 3/2 except for P2, P3, C3 and C4, when it is 
1. The information complexity of the d-regular d-dimensional 
hypercube is exactly d/2, see IS). Our paper is the first one 
which determines the information complexity and information 
rate of graphs in a large and natural family, namely, for trees. 

To state our result we need the notions of core and star 
cover rate of an arbitrary graph. 

Definition 1.1 We call a subset X of the vertices of a graph 
G a core of G if it induces a connected subgraph and one can 
find a neighbor x' ^ X of each x E X such that x is the only 
neighbor of x' among the vertices in X and {x' \ x £ X} is 
an independent set. 

A fractional star packing in a graph G is a collection of 
star subgraphs of G, each with an associated positive weight. 
The weight of a vertex or an edge in a fractional star packing 
is the total weights associated to stars containing that vertex 
or edge, respectively. The star cover rate of G is the infimum 
(minimum) of the maximal vertex weights among all fractional 
star packings with each edge having weight at least 1. 

If the weights in a fractional star packing are integral we 
speak of star packing and we say a vertex or edge is covered 
k times if its weight is k. 

Notice that when G is a tree a subset X of its vertices is a 
core if it induces a connected subgraph and each x E X has 
a neighbor outside X. 

Theorem 1.2: Let G be a graph, let c — c{G) be the 
maximum size of a core of G and let s = s(G) be the star 
cover rate of G. For the information complexity ct(G) of G 
we have 

2 - 1/c < ct(G) < s. 

Note that the second inequality of this theorem comes from 
Stinson 1 13 1. We state it here for completeness. Both the lower 
and the upper bounds are often useful, but they are not tight in 
general. The graph A depicted in Figure 1 has only one vertex 
cores, its information complexity is 3/2 and its star cover rate 
is 5/3. Thus we have strict inequalities in 

2-l/c(A) <a(A) <s(A). 
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Fig. 1. A graph with diiferent information complexity, maximum core size 
and star packing rate 

For trees, however, our lower and upper bounds coincide 
and we can even compute this value efficiently. 

Theorem 1.3: Let G be a tree, let c — c{G) be the 
maximum size of a core of G and let s = s{G) be the star 
cover rate of G. For the information complexity (j{G) of G 
we have 

2-1/c = ct(G) = s. 

One can compute c and thus cr(G') and the information 
rate p{G) in linear time. Furthermore, a linear secret sharing 
scheme exists on G that achieves optimal load 2 — 1/c. In 
this scheme the shares are vectors of length 2c — 1 over a 
finite field, the secret is a vector of length c and these are 
computed applying linear maps to a uniform random vector 
of some fixed length less than nc, where n is the number of 
vertices in G. The actual matrices providing the linear maps 
can be found in time linear in the output size. 

In Section we prove the lower bound part of Theorem 1 1.2 1 
using the entropy method, see Q, ||8|. Note that the upper 
bound comes from Stinson ifTJl . 

We prove the equalities of Theorem 11.31 in section |lll] by 
proving that s{G) = 2 - l/c(G) if G is a tree. 

Finally in Section |IV] we prove the algorithmic assertions 
of Theorem 11.31 

II. Information complexity of general graphs 

In this section we show that the information complexity of 
an arbitrary graph is at least 2 — 1/c where c is the size of 
the largest core in G. This proves the 2 — 1/c < cr(G) part of 
Theorem 11.21 

The proof uses the entropy method, see, e.g. Q, H). For 
the sake of completeness we sketch how this method works. 
Consider any secret sharing scheme for an arbitrary access 
structure. For any subset A of the participants we define f{A) 
to be the normalized entropy of the shares belonging to the 
participants in A, namely 

_ H{{S, I V £ A}) 

^^^^ - im ' 

where Sy is the share of participant v and ^ is the secret. Note 
that our goal is to lower bound the load of the scheme, which 
is maxi, /({«}). 

Using the standard (Shanon-type) information inequalities 
we have 

(a) /(0) = 0, 

(b) J{A) > f{B) when AD B (monotonicity) and 

(c) f {A) + f{B) > f{A UB)+ f{A n B) (submodularity). 
Using the definition of the secret sharing schemes we further 

have 

(d) f{A) > f{B) + 1 when AD B, A is qualified while B 
is not (strict monotonicity) and 

(e) f{A) + f{B) > f{A \JB) + f{Ar\B) + l when A, B 
are qualified while ^ n i? is not (strict submodularity). 



The entropy method involves proving a lower bound for 
maxt, /({w}) for any / satisfying inequalities (a)-(e). In our 
case we want to show that there is always a vertex v with 
/({^^}) > 2 — 1/c and this clearly follows from the following 
lemma. 

Lemma 2.1: Let X be a core of the graph G, and let / be 
a real valued function defined on the subsets of the vertices 
of G satisfying properties (a)-(e). Then 

5]/(W)>2|X|-l. 

vex 

Proof: First observe that the statement is trivial if \X\ < 
1. We can therefore assume \X\ > 2. We use the "independent 
sequence lemma" from |lj, IS] that ensures 

fix) > \X\ + 1. 

Using this inequality it is enough to prove 

E/(W)>/w + i^i-2. (1) 

vex 

We prove this latter inequality for all subsets X that induce 
a connected subgraph, not only for cores. We use induction on 
the number of the vertices in X. The base case X = {v, w} 
of ([T]i simplifies to 

fi{v}) + f{{w})>f{{v,w}) 

which is subadditivity and a consequence of properties (a) and 
(c). 

Now suppose X induces a connected subgraph and it has 
at least three vertices. Let us pick a vertex v E X such that 
Y ~ X — {v} also induces a connected subgraph. Note that 
such a vertex v always exists. Let w be a vertex in Y connected 
to V. Neither {v, w} nor Y is an independent set (we use 
\X\ > 3 here), but their intersection {w} is independent, thus 
unqualified. Property (e) gives 

f{{v,w}) + f{Y)>fiX) + fi{w}) + l. 

Also, f{{v}) + f{{w}) > f{{v,w}) by subadditivity, which 
yields 

f{{v}) + f{Y)>f{X) + l. 

The induction hypothesis for Y finishes the proof of ([T]i and 
also the proof of the lemma. ■ 

III. Information complexity of trees 

In this section we show the equalities stated in Theorem ll.3l 
They follow from Theorem 11.21 and the following lemma. To 
see this simply divide by c the weights of the star packing 
claimed by the lemma: the resulting fractional star packing 
shows that star cover rate of G is at most 2 — 1/c. 

Lemma 3.1: Let G be a tree with at least 2 vertices, and 
suppose each core of G has size at most c. Then there exists 
a star packing in G so that (i) all edges are covered exactly c 
times, and (ii) all vertices are covered at most 2c — 1 times. 

Proof: We replace each undirected edge {u, v) of G by c 
directed edges between u and v; the number of edges in each 
direction will be specified later. 
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To obtain the star packing we partition the (now directed) 
edges into stars in such a way that all edges will be directed 
outward from the center of the star. Thus all outgoing edges 
from a vertex v must be part of stars centered at v. Clearly, we 
can do this with as many stars centered at v as the maximal 
number of outgoing edges from v to some neighboring vertex. 
Furthermore v will be a non-center vertex of exactly as many 
stars as the total number of incoming directed edges to v. 
The sum of these two numbers gives the total number of stars 
covering v. As there are exactly c directed edges along each 
original edge, this cover number is c plus the total number 
of incoming directed edges except the smallest number of 
incoming directed edges from a single neighbor. 

Thus it suffices to show that we can direct these multiple 
edges so that this latter sum is at most c — 1. 

We start with assigning positive integers - weights - to each 
vertex. The weight of a set of vertices is the sum of the weights 
of the vertices in the set. Assigning weights is a technical step 
to ensure each vertex is in a maximum weight core. 

Let W be the set of all positive integer weight functions 
making the weight of every core at most c. As each vertex 
is an element of some core, W has finitely many elements. 
Furthermore W is not empty: if every vertex has weight 1, 
then by the definition of c, every core has weight < c. We 
call a weight function w G W maximal if increasing w by 
one at any one vertex yields a function outside W. Clearly, a 
maximal weight function must exist in W. 

From now on fix such a maximal weight function w G W. 
The maximality of w implies that for every vertex v there 
exists a core containing v whose weight is exactly c. 
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Fig. 2. A tree with weights and maximal core size c = 7. 



Now let (wi, V2) be an edge of G. If either vi of V2 is a leaf, 
then direct all c edges between vi and V2 toward the leaf. (If 
both vi and V2 are leaves, then G is a single edge, and there 
is nothing to prove.) 

If neither vx nor V2 is a leaf, then removing the edge (wi, W2) 
splits G into two disjoint subtrees, Gi and G2 where Gi 
contains Vi. Let Gi be a maximal weight (using the weight 
function w) core in Gi such that Ci contains Vi and let its 
weight be q = w{Ci). As Ci U G2 is a core of weight ci + C2 
in G, and all cores in G has weight < c, we have ci + C2 < c. 
Among the c directed edges between vi and V2 direct ci from 
vi towards V2, and C2 from V2 towards vi. If ci +C2 < c then 
direct the rest of these edges arbitrarily. 

The tree depicted on figure |2] has maximal core size c — 7, 
and the numbers show a maximal weight function. Each edge 
is replaced by seven directed edges, and the numbers the above 
procedure gives are 



A^B B~fGC-^D D^EE^F F^G 

3 6 >1 2 4 6 

A^B B^G C^D D<-E E^F F^G 

4 1 >2 5 3 1 

For example, when the edge GD is deleted, the only core in 
the remaining graph containing D is the singleton {D} with 
weight 2. This gives the value > 2 to G ^ D and similarly 
we have > 1 for C ^ D. This leaves 4 more edges between 
G and D that we can direct arbitrarily. In all other edges in 
the above example we have ci + C2 — c, thus the direction of 
all other edges are determined. 

We claim that our construction satisfies the above require- 
ment. Indeed, if v is a leaf, then it has exactly c incoming 
edges and no outgoing edge. Otherwise let w be a non-leaf 
vertex, and G be a core of maximal weight (according to w) 
containing v. By the maximality of w, G has weight c. When 
deleting v from G each connected component of the remaining 
graph contains exactly one neighbor of v in G. Let vi, V2, ■ ■ ., 
Vs be these neighbors and let Gi be the connected component 
of G — u containing Vi. Then 

c = w{G) = w{v) + w{Gi) H h w{Gs). 

Both G and G — Gi are cores in G — vvi and they were 
considered when directing the edges along vvi. Therefore we 
have at least w{Gi) edges directed from Vi to v and at least 
w{G — Gi) = c — w{Gi) edges going from v to u,;. As this 
accounts for all c edges between v and u,; these are the exact 
number of edges going either way. Thus the total number of 
incoming edges to v from vertices in G is 



wiGi 



wiGs) 



w{v) < c — 1. 



We have two cases: either v has a leaf neighbor, or it has 
none. In the first case all non-leaf neighbors of v are in G, as 
G was chosen to be maximal. There are no incoming edges 
from leaves, thus in this case we are done. 

In the other case no neighbor of u is a leaf. Again by 
maximality all but one of the neighbors of v must be in G. Let 
?;* be the exceptional neighbor of v outside G. Now G — Gi 
is a core in the graph G — vv* and it contains v, thus at least 
w{G — Gi) — c — w{Gi) edges are directed from v toward 
V*. It means that that the number of incoming edges from v* 
cannot be more than w{Gi), which is the number of incoming 
edges from Vi. It shows that the smallest number of incoming 
edges come from v*, and the total number of incoming edges 
from the other neighbors is at most c — 1, which was to be 
shown. ■ 

IV. Algorithms 

We turn to the algorithmic part of Theorem IL3I Let G be 
a tree. The size c(G) of the maximal core in G can be found 
by the following algorithm. 

Pick an arbitrary root r in G. For each vertex w in G let us 
denote by G„ the subtree of G "below" v, i.e., G^ = G and 
for u 7^ r we obtain G„ by deleting the edge connecting v to 
its "parent" (the neighbor closer to r) and taking the connected 
component of v. 
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First we order the the vertices in reverse breadth first searc h 
order (starting from the vertices farthest from the root) and 
compute the value c{v) of the size of the largest core in 
containing v. We define c{v) — for leaf vertices v. If v 
is not a leaf, then c{v) is one plus the sum of c{vi) for all 
children Vi of v with the smallest summand left out of the 
summation. This enables us to compute c{v) in time 0{dv) 
from the values computed earlier Here stands for the degree 
of V. This makes for a linear time algorithm for computing all 
the values c{v). 

Having computed c{v) for each vertex, computing c(G) is 
simple. If the largest core contains the root r, then its size is 
c(r). Otherwise if w ^ r is its vertex closest to the root its 
size is one plus the sum of c{vi) for all the children Vi of v 
(this time no summand is left out). Computing these values 
and finding the maximum takes linear time again. 

Finally in order to construct the optimal secret sharing 
scheme one has to find a maximal weight function w G W. 
Notice that for an arbitrary weight function w one can compute 
all the values Cw{v) in linear time the same way we computed 
c{v). Here Cw{v) is the maximal w-weight of a core in 
containing v. Now increasing the weight of the root r by 
c — Cw (r) we can ensure that no core has weight over c but 
the root is contained in a core of weight c. Starting from 
the all 1 weight function and repeating this procedure for all 
vertices as roots we find a maximal weight function. This takes 
quadratic time (still OK as the output is huge), but we remark 
that with a more careful analysis (increasing the weight of 
vertices in a single breadth first search order after computing 
first c{v) without weights) a maximal weight function can be 
also obtained in linear time. 

From a maximal weight function w one can orient c^{v) 
edges from v to its parent (v ^ r) and c — c^(u) edges from 
the parent to v. This yields an optimal star packing. Now we 
apply Stinson's technique |13| to obtain the secret sharing 
scheme on G by combining linear schemes on the individual 
stars. The parameters of this combined scheme are as stated 
in Theorem 1 1.3 1 
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